diff options
| -rw-r--r-- | lket.5.in | 38 | ||||
| -rw-r--r-- | tapset/LKET/Changelog | 7 | ||||
| -rwxr-xr-x | tapset/LKET/iosyscall.stp | 60 | ||||
| -rwxr-xr-x | tapset/LKET/register_event.stp | 1622 |
4 files changed, 895 insertions, 832 deletions
@@ -29,7 +29,7 @@ user. Once the data has been collected, it is then post-processed according to the need of the user. Trace data can be processed in various different ways to generate simple to complex reports. -.SH TRACE DATA FORMAT +.SH BINARY TRACING By default, LKET will log the trace data in binary format. @@ -46,6 +46,7 @@ generated by LKET into readable data in ascii format. uses the pre-cpu binary trace data files(stpd_cpu*) as inputs, and generates an output file named .IR lket.out . +or dump the trace data into MySQL database. See .IR lket-b2a (1) manual page for more detail. @@ -55,14 +56,25 @@ If you want LKET to log trace data in ASCII format directly, you should: stap \-D ASCII_TRACE ... .ESAMPLE +.B *Notes* +that in order to make +.I LKET +able to work in binary tracing mode, all strings logged by +.I LKET +should be NULL-terminated, which means you have +to use "%0s" instead of "%s" for both user appended extra printing statements +and _lket_trace() which is called in +.I LKET +tapsets. + .SH EVENT REGISTER LKET provides a way to log the metadata of the trace data by events registering. -Two function is provided: +Two functions is provided: .P .IP -.SB register_sys_event(event_desc:string, grpid:long, hookid:long, fmt:string, names:string) +.SB void _register_sys_event (char *event_desc, int grpid, int hookid, char *fmt, char *field_name) .IP .SB register_user_event(grpid:long, hookid:long, fmt:string, names:string) .P @@ -94,30 +106,30 @@ The names contains in should match the format tokens contains in .I fmt -.B register_sys_event -is used to register the newly added event hooks. For example, supposing you +.B _register_sys_event is a c function which is used to register the newly +added trace hooks in LKET tapsets. For example, supposing you want to add a new event hook to trace the entry of sys_open, and you want this event hook to log the fd, flag and mode paremeters for you. You should add: .SAMPLE -register_sys_event("iosyscall.open.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_OPEN_ENTRY, - "STRING:INT32:INT32", "filename:flags:mode") +_register_sys_event("iosyscall.open.entry", + _GROUP_IOSYSCALL, + _HOOKID_IOSYSCALL_OPEN_ENTRY, + "STRING:INT32:INT32", + "filename:flags:mode"); .ESAMPLE into the function .B register_sys_events in LKET/register_event.stp - .B register_user_event -is used for user to add extra trace data for a event hook. See -the section +is a SystemTap script function which is used for user to add extra trace data +for a event hook. See the section .B CUSTOMIZED TRACE DATA for more detail - .SH CUSTOMIZED TRACE DATA LKET provides a set of event hooks that log the predefined @@ -173,7 +185,7 @@ to convert these binary trace data files into readable ascii format or dump them .IR lket-b2a (1) man page for more detail. -.SH EVENT HOOKS +.SH EVENT HOOKS AND TRACE DATA FORMAT The following sections enumerate the variety of event hooks implemented in LKET and their trace data format. The trace data generated by different diff --git a/tapset/LKET/Changelog b/tapset/LKET/Changelog index 89e18e48..ed24205a 100644 --- a/tapset/LKET/Changelog +++ b/tapset/LKET/Changelog @@ -1,3 +1,10 @@ +2006-11-10 Li Guanglei <guanglei@cn.ibm.com> + + * iosyscall.stp: add some trace aliases + * register_event.stp: register sys events + in embedded c codes for stap to better + optimize the generated codes. + 2006-11-09 Li Guanglei <guanglei@cn.ibm.com> * process.stp: make fork/execce trace hooks diff --git a/tapset/LKET/iosyscall.stp b/tapset/LKET/iosyscall.stp index 4650cde7..3e1c60aa 100755 --- a/tapset/LKET/iosyscall.stp +++ b/tapset/LKET/iosyscall.stp @@ -60,6 +60,11 @@ probe addevent.iosyscall.return /* addevent.iosyscall.open.{entry,return} */ +probe addevent.iosyscall.open + = addevent.iosyscall.open.entry, + addevent.iosyscall.open.return +{} + probe addevent.iosyscall.open.entry += _addevent.iosyscall.open.entry { @@ -98,6 +103,10 @@ function log_iosyscall_return(hookid:long, ret_val:long) /* addevent.iosyscall.close.{entry,return} */ +probe addevent.iosyscall.close + = addevent.iosyscall.close.entry, addevent.iosyscall.close.return +{} + probe addevent.iosyscall.close.entry += _addevent.iosyscall.close.entry { @@ -130,6 +139,10 @@ function log_iosyscall_close(hookid:long, fd:long) /* addevent.iosyscall.read.{entry,return} */ +probe addevent.iosyscall.read + = addevent.iosyscall.read.entry, addevent.iosyscall.read.return +{} + probe addevent.iosyscall.read.entry += _addevent.iosyscall.read.entry { @@ -157,6 +170,10 @@ probe _addevent.iosyscall.read.return /* addevent.iosyscall.write.{entry,return} */ +probe addevent.iosyscall.write + = addevent.iosyscall.write.entry, addevent.iosyscall.write.return +{} + probe addevent.iosyscall.write.entry += _addevent.iosyscall.write.entry { @@ -191,6 +208,10 @@ function log_iosyscall_read_write(hookid:long, fd:long, buf_uaddr:long, /* addevent.iosyscall.readv.{entry,return} */ +probe addevent.iosyscall.readv + = addevent.iosyscall.readv.entry, addevent.iosyscall.readv.return +{} + probe addevent.iosyscall.readv.entry += _addevent.iosyscall.readv.entry { @@ -218,6 +239,10 @@ probe _addevent.iosyscall.readv.return /* addevent.iosyscall.writev.{entry,return} */ +probe addevent.iosyscall.writev + = addevent.iosyscall.writev.entry, addevent.iosyscall.writev.return +{} + probe addevent.iosyscall.writev.entry += _addevent.iosyscall.writev.entry { @@ -252,6 +277,10 @@ function log_iosyscall_readv_writev(hookid:long, fd:long, /* addevent.iosyscall.pread64.{entry,return} */ +probe addevent.iosyscall.pread64 + = addevent.iosyscall.pread64.entry, addevent.iosyscall.pread64.return +{} + probe addevent.iosyscall.pread64.entry += _addevent.iosyscall.pread64.entry { @@ -280,6 +309,10 @@ probe _addevent.iosyscall.pread64.return /* addevent.iosyscall.pwrite64.{entry,return} */ +probe addevent.iosyscall.pwrite64 + = addevent.iosyscall.pwrite64.entry, addevent.iosyscall.pwrite64.return +{} + probe addevent.iosyscall.pwrite64.entry += _addevent.iosyscall.pwrite64.entry { @@ -315,6 +348,10 @@ function log_iosyscall_pread64_pwrite64(hookid:long, fd:long, /* addevent.iosyscall.readahead.{entry,return} */ +probe addevent.iosyscall.readahead + = addevent.iosyscall.readahead.entry, addevent.iosyscall.readahead.return +{} + probe addevent.iosyscall.readahead.entry += _addevent.iosyscall.readahead.entry { @@ -349,6 +386,10 @@ function log_iosyscall_readahead(hookid:long, fd:long, offset:long,count:long) /* addevent.iosyscall.sendfile.{entry,return} */ +probe addevent.iosyscall.sendfile + = addevent.iosyscall.sendfile.entry, addevent.iosyscall.sendfile.return +{} + probe addevent.iosyscall.sendfile.entry += _addevent.iosyscall.sendfile.entry { @@ -385,6 +426,9 @@ function log_iosyscall_sendfile(hookid:long, out_fd:long, in_fd:long, /* addevent.iosyscall.lseek.{entry,return} */ +probe addevent.iosyscall.lseek + = addevent.iosyscall.lseek.entry, addevent.iosyscall.lseek.return +{} probe addevent.iosyscall.lseek.entry += _addevent.iosyscall.lseek.entry @@ -419,6 +463,10 @@ function log_iosyscall_lseek(hookid:long, fd:long, offset:long, whence:long) /* addevent.iosyscall.llseek.{entry,return} */ +probe addevent.iosyscall.llseek + = addevent.iosyscall.llseek.entry, addevent.iosyscall.llseek.return +{} + probe addevent.iosyscall.llseek.entry += _addevent.iosyscall.llseek.entry { @@ -455,6 +503,9 @@ function log_iosyscall_llseek(hookid:long, fd:long, offset_high:long, /* addevent.iosyscall.sync.{entry,return} */ +probe addevent.iosyscall.sync + = addevent.iosyscall.sync.entry, addevent.iosyscall.sync.return +{} probe addevent.iosyscall.sync.entry += _addevent.iosyscall.sync.entry @@ -524,6 +575,9 @@ function log_iosyscall_sync(hookid:long) /* addevent.iosyscall.fsync.{entry,return} */ +probe addevent.iosyscall.fsync + = addevent.iosyscall.fsync.entry, addevent.iosyscall.fsync.return +{} probe addevent.iosyscall.fsync.entry += _addevent.iosyscall.fsync.entry @@ -552,6 +606,9 @@ probe _addevent.iosyscall.fsync.return /* addevent.iosyscall.fdatasync.{entry,return} */ +probe addevent.iosyscall.fdatasync + = addevent.iosyscall.fdatasync.entry, addevent.iosyscall.fdatasync.return +{} probe addevent.iosyscall.fdatasync.entry += _addevent.iosyscall.fdatasync.entry @@ -585,6 +642,9 @@ function log_iosyscall_fsync(hookid:long, fd:long) /* addevent.iosyscall.flock.{entry,return} */ +probe addevent.iosyscall.flock + = addevent.iosyscall.flock.entry, addevent.iosyscall.flock.return +{} probe addevent.iosyscall.flock.entry += _addevent.iosyscall.flock.entry diff --git a/tapset/LKET/register_event.stp b/tapset/LKET/register_event.stp index b4a1a470..294487b7 100755 --- a/tapset/LKET/register_event.stp +++ b/tapset/LKET/register_event.stp @@ -5,9 +5,9 @@ // Public License (GPL); either version 2, or (at your option) any // later version. -global sys_field_name, sys_evt_fmt, sys_event_desc global usr_field_name, usr_evt_fmt global have_userevent + %{ #define _MAXGROUPID 0xFF @@ -25,132 +25,52 @@ int get_fmtcode(char *fmt) return 0; } -%} - -function dummy_c_function() -%{ -%} - -function register_user_event(grpid:long, hookid:long,fmt:string, field_name:string) -{ - usr_evt_fmt[grpid, hookid] = fmt - usr_field_name[grpid, hookid] = field_name - dummy_c_function() /* ensure register_user_event won't be compiled away */ -} - -function register_sys_event(event_desc:string, grpid:long, hookid:long,fmt:string, - field_name:string) -{ - sys_event_desc[grpid, hookid] = event_desc; - sys_evt_fmt[grpid, hookid] = fmt - sys_field_name[grpid, hookid] = field_name - dummy_c_function() /* ensure register_user_event won't be compiled away */ -} - - -function write_events_desc() +void _register_event(int grpid, int hookid, int evt_type, char *fmt, char *names) { - foreach([grpid, hookid] in sys_evt_fmt) - { - register_evt_desc(grpid, hookid, HOOKID_REGEVTDESC, - sys_event_desc[grpid, hookid]) - register_event(grpid, hookid, HOOKID_REGSYSEVT, - sys_event_desc[grpid,hookid], sys_evt_fmt[grpid, hookid], - sys_field_name[grpid, hookid]) - } - if(have_userevent == 1) - { - foreach([grpid, hookid] in usr_evt_fmt) - { - register_event(grpid, hookid, HOOKID_REGUSREVT, - sys_event_desc[grpid,hookid], usr_evt_fmt[grpid, hookid], - usr_field_name[grpid, hookid]) - } - delete usr_field_name - delete usr_evt_fmt - } - - delete sys_field_name - delete sys_evt_fmt - delete sys_event_desc -} - -function register_evt_desc(grpid:long, hookid:long, evt_type:long, desc:string) -%{ - _stp_pbuf * pb; - char *total_length; - int cpu = smp_processor_id(); - - if(!strncmp(THIS->desc,"",1)) { - _stp_warn("empty event description for grpid:%d, hookid:%d\n", - THIS->grpid, THIS->hookid); - _stp_exit(); - } - - if( THIS->grpid <= 0 || THIS->grpid > _MAXGROUPID || - THIS->hookid <= 0 || THIS->hookid > _MAXHOOKID) { - _stp_warn("register_evt_desc: wrong range in groupid/hookid, type: %d, event: %s, grp:%d, hkid:%d\n", THIS->evt_type, THIS->desc, THIS->grpid, THIS->hookid); - _stp_exit(); - _stp_exit(); - } - - _lket_trace(_GROUP_REGEVT, THIS->evt_type, "%1b%1b%0s", THIS->grpid, - THIS->hookid, THIS->desc); - -#if !defined(ASCII_TRACE) - pb = per_cpu_ptr(Stp_pbuf, smp_processor_id()); - total_length = &(pb->buf[0]); - *(int16_t *)total_length = pb->len - 4; -#endif - _stp_print_flush(); -%} - -function register_event(grpid:long, hookid:long, evt_type:long, desc:string, - fmt:string, names:string) -%{ char in_fmt[512], in_name[512]; char *p_in_fmt, *p_in_name; - char *fmt, *name; + char *_fmt, *name; _stp_pbuf * pb; int cpu = smp_processor_id(); char *total_length; p_in_fmt = in_fmt; p_in_name = in_name; - if(!strncmp(THIS->fmt,"",1) && !strncmp(THIS->names,"",1)) { - _lket_trace(_GROUP_REGEVT,THIS->evt_type,"%1b%1b",THIS->grpid,THIS->hookid); + if(!strncmp(fmt,"",1) && !strncmp(names,"",1)) { + _lket_trace(_GROUP_REGEVT,evt_type,"%1b%1b",grpid,hookid); goto reg_epilogue; } - if( THIS->grpid <= 0 || THIS->grpid > _MAXGROUPID || - THIS->hookid <= 0 || THIS->hookid > _MAXHOOKID) { - _stp_warn("register_event: wrong range in groupid/hookid, type: %d, event: %s, grp:%d, hkid:%d\n", THIS->evt_type, THIS->desc, THIS->grpid, THIS->hookid); + if( grpid <= 0 || grpid > _MAXGROUPID || + hookid <= 0 || hookid > _MAXHOOKID) { + _stp_warn("register_event: wrong groupid/hookid, type: %d, grp:%d, hkid:%d\n", + evt_type, grpid, hookid); _stp_exit(); } - strncpy(in_fmt, THIS->fmt, 512); - strncpy(in_name, THIS->names, 512); + strncpy(in_fmt, fmt, 512); + strncpy(in_name, names, 512); - fmt = strsep(&p_in_fmt, ":"); + _fmt = strsep(&p_in_fmt, ":"); name = strsep(&p_in_name, ":"); - while(fmt!=NULL && name!=NULL) { - if(get_fmtcode(fmt) == -1) { + while(_fmt!=NULL && name!=NULL) { + if(get_fmtcode(_fmt) == -1) { _stp_warn("error in fmt string\n"); _stp_exit(); } - fmt = strsep(&p_in_fmt, ":"); + _fmt = strsep(&p_in_fmt, ":"); name = strsep(&p_in_name, ":"); } - if(fmt!=NULL || name != NULL) { + if(_fmt!=NULL || name != NULL) { _stp_warn("unpaired types/names, grpid:%d, hookid:%d\n", - THIS->grpid, THIS->hookid); + grpid, hookid); _stp_exit(); } - _lket_trace(_GROUP_REGEVT, THIS->evt_type, "%1b%1b%0s%0s", THIS->grpid, - THIS->hookid, THIS->fmt, THIS->names); + _lket_trace(_GROUP_REGEVT, evt_type, "%1b%1b%0s%0s", grpid, + hookid, fmt, names); reg_epilogue: @@ -161,882 +81,946 @@ reg_epilogue: #endif _stp_print_flush(); +} + +void _register_evt_desc(int grpid, int hookid, int evt_type, char *desc) +{ + _stp_pbuf * pb; + char *total_length; + int cpu = smp_processor_id(); + + if(!strncmp(desc,"",1)) { + _stp_warn("empty event description for grpid:%d, hookid:%d\n", + grpid, hookid); + _stp_exit(); + } + + if( grpid <= 0 || grpid > _MAXGROUPID || + hookid <= 0 || hookid > _MAXHOOKID) { + _stp_warn("_register_evt_desc: wrong groupid/hookid, type: %d, event: %s, grp:%d, hkid:%d\n", + evt_type, desc, grpid, hookid); + _stp_exit(); + _stp_exit(); + } + + _lket_trace(_GROUP_REGEVT, evt_type, "%1b%1b%0s", grpid, hookid, desc); + +#if !defined(ASCII_TRACE) + pb = per_cpu_ptr(Stp_pbuf, smp_processor_id()); + total_length = &(pb->buf[0]); + *(int16_t *)total_length = pb->len - 4; +#endif + _stp_print_flush(); +} + +void _register_sys_event (char *event_desc, int grpid, int hookid, char *fmt, char *field_name) +{ + _register_evt_desc(grpid, hookid, _HOOKID_REGEVTDESC, event_desc); + _register_event(grpid, hookid, _HOOKID_REGSYSEVT, fmt, field_name); +} + %} -function register_sys_events() +function dummy_c_function() +%{ +%} + +function register_user_event(grpid:long, hookid:long,fmt:string, field_name:string) +{ + usr_evt_fmt[grpid, hookid] = fmt + usr_field_name[grpid, hookid] = field_name + dummy_c_function() /* ensure register_user_event won't be compiled away */ +} + +function write_events_desc() { - reset_maxaction() + if(have_userevent == 1) + { + foreach([grpid, hookid] in usr_evt_fmt) + { + register_event(grpid, hookid, HOOKID_REGUSREVT, + usr_evt_fmt[grpid, hookid], + usr_field_name[grpid, hookid]) + } + delete usr_field_name + delete usr_evt_fmt + } + +} + - register_sys_event("syscall.entry", GROUP_SYSCALL, HOOKID_SYSCALL_ENTRY, - "STRING", "syscall") - register_sys_event("syscall.return", GROUP_SYSCALL, HOOKID_SYSCALL_RETURN, - "STRING", "syscall") +function register_event(grpid:long, hookid:long, evt_type:long, fmt:string, names:string) +%{ + _register_event(THIS->grpid, THIS->hookid, THIS->evt_type, THIS->fmt, THIS->names); +%} + +function register_sys_events() +%{ + _register_sys_event("syscall.entry", _GROUP_SYSCALL, _HOOKID_SYSCALL_ENTRY, + "STRING", "syscall"); + _register_sys_event("syscall.return", _GROUP_SYSCALL, _HOOKID_SYSCALL_RETURN, + "STRING", "syscall"); - register_sys_event("process_snapshot", GROUP_PROCESS, HOOKID_PROCESS_SNAPSHOT, - "INT32:INT32:INT32:STRING", "tid:pid:ppid:pname") - register_sys_event("process.execve", GROUP_PROCESS, HOOKID_PROCESS_EXECVE, - "INT32:STRING", "pid:pname") - register_sys_event("process.fork", GROUP_PROCESS, HOOKID_PROCESS_FORK, - "INT32:INT32:INT32", "tid:pid:ppid") - - register_sys_event("ioscheduler.elv_next_request.entry", - GROUP_IOSCHED, HOOKID_IOSCHED_NEXT_REQ_ENTRY, - "STRING", "elv_name") - register_sys_event("ioscheduler.elv_next_request.return", - GROUP_IOSCHED, HOOKID_IOSCHED_NEXT_REQ_RETURN, - "INT8:INT8:INT64:INT64", "major:minor:req_addr:req_flags") - - - register_sys_event("ioscheduler.elv_add_request", - GROUP_IOSCHED, HOOKID_IOSCHED_ADD_REQ, - "STRING:INT8:INT8:INT64:INT64", "elv_name:major:minor:request:req_flags") - register_sys_event("ioscheduler.elv_completed_request", - GROUP_IOSCHED, HOOKID_IOSCHED_COMPLETE_REQ, - "STRING:INT8:INT8:INT64:INT64", "elv_name:major:minor:request:req_flags") - - register_sys_event("tskdispatch.ctxswitch", - GROUP_TASK, HOOKID_TASK_CTXSWITCH, - "INT32:INT32:INT8", "prev_pid:next_pid:prev_state") - register_sys_event("tskdispatch.cpuidle", GROUP_TASK, HOOKID_TASK_CPUIDLE, - "INT32", "cur_pid") - - register_sys_event("scsi.ioentry", GROUP_SCSI, HOOKID_SCSI_IOENTRY, - "INT8:INT8:INT8:INT64", "major:minor:sdev_state:request_addr") - - register_sys_event("scsi.iodispatching", GROUP_SCSI, HOOKID_SCSI_IO_TO_LLD, + _register_sys_event("process_snapshot", _GROUP_PROCESS, _HOOKID_PROCESS_SNAPSHOT, + "INT32:INT32:INT32:STRING", "tid:pid:ppid:pname"); + _register_sys_event("process.execve", _GROUP_PROCESS, _HOOKID_PROCESS_EXECVE, + "INT32:STRING", "pid:pname"); + _register_sys_event("process.fork", _GROUP_PROCESS, _HOOKID_PROCESS_FORK, + "INT32:INT32:INT32", "tid:pid:ppid"); + + _register_sys_event("ioscheduler.elv_next_request.entry", + _GROUP_IOSCHED, _HOOKID_IOSCHED_NEXT_REQ_ENTRY, + "STRING", "elv_name"); + _register_sys_event("ioscheduler.elv_next_request.return", + _GROUP_IOSCHED, _HOOKID_IOSCHED_NEXT_REQ_RETURN, + "INT8:INT8:INT64:INT64", "major:minor:req_addr:req_flags"); + + + _register_sys_event("ioscheduler.elv_add_request", + _GROUP_IOSCHED, _HOOKID_IOSCHED_ADD_REQ, + "STRING:INT8:INT8:INT64:INT64", "elv_name:major:minor:request:req_flags"); + _register_sys_event("ioscheduler.elv_completed_request", + _GROUP_IOSCHED, _HOOKID_IOSCHED_COMPLETE_REQ, + "STRING:INT8:INT8:INT64:INT64", "elv_name:major:minor:request:req_flags"); + + _register_sys_event("tskdispatch.ctxswitch", + _GROUP_TASK, _HOOKID_TASK_CTXSWITCH, + "INT32:INT32:INT8", "prev_pid:next_pid:prev_state"); + _register_sys_event("tskdispatch.cpuidle", _GROUP_TASK, _HOOKID_TASK_CPUIDLE, + "INT32", "cur_pid"); + + _register_sys_event("scsi.ioentry", _GROUP_SCSI, _HOOKID_SCSI_IOENTRY, + "INT8:INT8:INT8:INT64", "major:minor:sdev_state:request_addr"); + + _register_sys_event("scsi.iodispatching", _GROUP_SCSI, _HOOKID_SCSI_IO_TO_LLD, "INT8:INT8:INT8:INT8:INT8:INT8:INT64:INT32:INT64", - "host:channel:lun:dev_id:dev_state:data_dir:reqbuf_addr:reqbuf_len:request_addr") + "host:channel:lun:dev_id:dev_state:data_dir:reqbuf_addr:reqbuf_len:request_addr"); - register_sys_event("scsi.iodone", GROUP_SCSI, HOOKID_SCSI_IODONE_BY_LLD, + _register_sys_event("scsi.iodone", _GROUP_SCSI, _HOOKID_SCSI_IODONE_BY_LLD, "INT8:INT8:INT8:INT8:INT8:INT8:INT64", - "host:channel:lun:dev_id:dev_state:data_dir:request_addr") + "host:channel:lun:dev_id:dev_state:data_dir:request_addr"); - register_sys_event("scsi.iocompleted", - GROUP_SCSI, HOOKID_SCSI_IOCOMP_BY_MIDLEVEL, + _register_sys_event("scsi.iocompleted", + _GROUP_SCSI, _HOOKID_SCSI_IOCOMP_BY_MIDLEVEL, "INT8:INT8:INT8:INT8:INT8:INT8:INT64:INT32", - "host:channel:lun:dev_id:dev_state:data_dir:request_addr:done_bytes") - - register_sys_event("pagefault", GROUP_PAGEFAULT, HOOKID_PAGEFAULT, - "INT64:INT8", "addr:write") - - register_sys_event("netdev.receive", GROUP_NETDEV, HOOKID_NETDEV_RECEIVE, - "STRING:INT32:INT16:INT32", "dev_name:data_len:protocol:buff_size") - - register_sys_event("netdev.transmit", GROUP_NETDEV, HOOKID_NETDEV_TRANSMIT, - "STRING:INT32:INT16:INT32", "dev_name:data_len:protocol:buff_size") - - register_sys_event("iosyscall.open.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_OPEN_ENTRY, - "STRING:INT32:INT32", "filename:flags:mode") - register_sys_event("iosyscall.open.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_OPEN_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.close.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_CLOSE_ENTRY, - "INT64", "fd") - register_sys_event("iosyscall.close.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_CLOSE_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.read.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READ_ENTRY, - "INT64:INT64:INT64", "fd:buff_addr:count") - register_sys_event("iosyscall.read.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READ_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.write.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITE_ENTRY, - "INT64:INT64:INT64", "fd:buff_addr:count") - register_sys_event("iosyscall.write.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITE_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.readv.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READV_ENTRY, - "INT64:INT64:INT64", "fd:vector_uaddr:count") - register_sys_event("iosyscall.readv.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READV_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.writev.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITEV_ENTRY, - "INT64:INT64:INT64", "fd:vector_uaddr:count") - register_sys_event("iosyscall.writev.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_WRITEV_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.pread64.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PREAD64_ENTRY, - "INT64:INT64:INT64:INT64", "fd:buff_uaddr:count:offset") - register_sys_event("iosyscall.pread64.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PREAD64_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.pwrite64.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PWRITE64_ENTRY, - "INT64:INT64:INT64:INT64", "fd:buff_uaddr:count:offset") - register_sys_event("iosyscall.pwrite64.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_PWRITE64_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.readahead.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READAHEAD_ENTRY, - "INT64:INT64:INT64", "fd:offset:count") - register_sys_event("iosyscall.readahead.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_READAHEAD_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.sendfile.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SENDFILE_ENTRY, - "INT64:INT64:INT64:INT64", "out_fd:in_fd:offset_uaddr:count") - register_sys_event("iosyscall.sendfile.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SENDFILE_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.lseek.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LSEEK_ENTRY, - "INT64:INT64:INT8", "fd:offset:whence") - register_sys_event("iosyscall.lseek.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LSEEK_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.llseek.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LLSEEK_ENTRY, + "host:channel:lun:dev_id:dev_state:data_dir:request_addr:done_bytes"); + + _register_sys_event("pagefault", _GROUP_PAGEFAULT, _HOOKID_PAGEFAULT, + "INT64:INT8", "addr:write"); + + _register_sys_event("netdev.receive", _GROUP_NETDEV, _HOOKID_NETDEV_RECEIVE, + "STRING:INT32:INT16:INT32", "dev_name:data_len:protocol:buff_size"); + + _register_sys_event("netdev.transmit", _GROUP_NETDEV, _HOOKID_NETDEV_TRANSMIT, + "STRING:INT32:INT16:INT32", "dev_name:data_len:protocol:buff_size"); + + _register_sys_event("iosyscall.open.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_OPEN_ENTRY, + "STRING:INT32:INT32", "filename:flags:mode"); + _register_sys_event("iosyscall.open.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_OPEN_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.close.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_CLOSE_ENTRY, + "INT64", "fd"); + _register_sys_event("iosyscall.close.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_CLOSE_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.read.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_READ_ENTRY, + "INT64:INT64:INT64", "fd:buff_addr:count"); + _register_sys_event("iosyscall.read.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_READ_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.write.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_WRITE_ENTRY, + "INT64:INT64:INT64", "fd:buff_addr:count"); + _register_sys_event("iosyscall.write.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_WRITE_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.readv.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_READV_ENTRY, + "INT64:INT64:INT64", "fd:vector_uaddr:count"); + _register_sys_event("iosyscall.readv.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_READV_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.writev.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_WRITEV_ENTRY, + "INT64:INT64:INT64", "fd:vector_uaddr:count"); + _register_sys_event("iosyscall.writev.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_WRITEV_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.pread64.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_PREAD64_ENTRY, + "INT64:INT64:INT64:INT64", "fd:buff_uaddr:count:offset"); + _register_sys_event("iosyscall.pread64.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_PREAD64_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.pwrite64.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_PWRITE64_ENTRY, + "INT64:INT64:INT64:INT64", "fd:buff_uaddr:count:offset"); + _register_sys_event("iosyscall.pwrite64.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_PWRITE64_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.readahead.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_READAHEAD_ENTRY, + "INT64:INT64:INT64", "fd:offset:count"); + _register_sys_event("iosyscall.readahead.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_READAHEAD_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.sendfile.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_SENDFILE_ENTRY, + "INT64:INT64:INT64:INT64", "out_fd:in_fd:offset_uaddr:count"); + _register_sys_event("iosyscall.sendfile.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_SENDFILE_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.lseek.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_LSEEK_ENTRY, + "INT64:INT64:INT8", "fd:offset:whence"); + _register_sys_event("iosyscall.lseek.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_LSEEK_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.llseek.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_LLSEEK_ENTRY, "INT64:INT64:INT64:INT64:INT8b", - "fd:offset_high:offset_low:result_uaddr:whence") - register_sys_event("iosyscall.llseek.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_LLSEEK_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.sync.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SYNC_ENTRY, - "", "") - - register_sys_event("iosyscall.sync.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_SYNC_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.fsync.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FSYNC_ENTRY, - "INT64", "fd") - register_sys_event("iosyscall.fsync.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FSYNC_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.fdatasync.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FDATASYNC_ENTRY, - "INT64", "fd") - register_sys_event("iosyscall.fdatasync.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FDATASYNC_RETURN, - "INT64", "return") - - register_sys_event("iosyscall.flock.entry", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FLOCK_ENTRY, - "INT64:INT32", "fd:operation") - register_sys_event("iosyscall.flock.return", - GROUP_IOSYSCALL, HOOKID_IOSYSCALL_FLOCK_RETURN, - "INT64", "return") - - register_sys_event("aio.io_setup.entry", - GROUP_AIO, HOOKID_AIO_IO_SETUP_ENTRY, - "INT32:INT64", "nr_events:ctxp_uaddr") - register_sys_event("aio.io_setup.return", - GROUP_AIO, HOOKID_AIO_IO_SETUP_RETURN, - "INT64", "return") - - register_sys_event("aio.io_submit.entry", - GROUP_AIO, HOOKID_AIO_IO_SUBMIT_ENTRY, - "INT64:INT32:INT64", "ctx_id:nr:iocbpp_uaddr") - register_sys_event("aio.io_submit.return", - GROUP_AIO, HOOKID_AIO_IO_SUBMIT_RETURN, - "INT64", "return") - - register_sys_event("aio.io_submit_one.entry", - GROUP_AIO, HOOKID_AIO_IO_SUBMIT_ONE_ENTRY, + "fd:offset_high:offset_low:result_uaddr:whence"); + _register_sys_event("iosyscall.llseek.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_LLSEEK_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.sync.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_SYNC_ENTRY, + "", ""); + + _register_sys_event("iosyscall.sync.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_SYNC_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.fsync.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_FSYNC_ENTRY, + "INT64", "fd"); + _register_sys_event("iosyscall.fsync.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_FSYNC_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.fdatasync.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_FDATASYNC_ENTRY, + "INT64", "fd"); + _register_sys_event("iosyscall.fdatasync.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_FDATASYNC_RETURN, + "INT64", "return"); + + _register_sys_event("iosyscall.flock.entry", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_FLOCK_ENTRY, + "INT64:INT32", "fd:operation"); + _register_sys_event("iosyscall.flock.return", + _GROUP_IOSYSCALL, _HOOKID_IOSYSCALL_FLOCK_RETURN, + "INT64", "return"); + + _register_sys_event("aio.io_setup.entry", + _GROUP_AIO, _HOOKID_AIO_IO_SETUP_ENTRY, + "INT32:INT64", "nr_events:ctxp_uaddr"); + _register_sys_event("aio.io_setup.return", + _GROUP_AIO, _HOOKID_AIO_IO_SETUP_RETURN, + "INT64", "return"); + + _register_sys_event("aio.io_submit.entry", + _GROUP_AIO, _HOOKID_AIO_IO_SUBMIT_ENTRY, + "INT64:INT32:INT64", "ctx_id:nr:iocbpp_uaddr"); + _register_sys_event("aio.io_submit.return", + _GROUP_AIO, _HOOKID_AIO_IO_SUBMIT_RETURN, + "INT64", "return"); + + _register_sys_event("aio.io_submit_one.entry", + _GROUP_AIO, _HOOKID_AIO_IO_SUBMIT_ONE_ENTRY, "INT64:INT64:INT16:INT16:INT32:INT64:INT64:INT64", - "ctx:user_iocb_uaddr:aio_lio_opcode:aio_reqprio:aio_fildes:aio_buf:aio_nbytes:aio_offset") - register_sys_event("aio.io_submit_one.return", - GROUP_AIO, HOOKID_AIO_IO_SUBMIT_ONE_RETURN, - "INT64", "return") - - register_sys_event("aio.io_destroy.entry", - GROUP_AIO, HOOKID_AIO_IO_DESTROY_ENTRY, - "INT64", "ctx") - register_sys_event("aio.io_destroy.return", - GROUP_AIO, HOOKID_AIO_IO_DESTROY_RETURN, - "INT64", "return") - - register_sys_event("aio.io_getevents.entry", - GROUP_AIO, HOOKID_AIO_IO_GETEVENTS_ENTRY, + "ctx:user_iocb_uaddr:aio_lio_opcode:aio_reqprio:aio_fildes:aio_buf:aio_nbytes:aio_offset"); + _register_sys_event("aio.io_submit_one.return", + _GROUP_AIO, _HOOKID_AIO_IO_SUBMIT_ONE_RETURN, + "INT64", "return"); + + _register_sys_event("aio.io_destroy.entry", + _GROUP_AIO, _HOOKID_AIO_IO_DESTROY_ENTRY, + "INT64", "ctx"); + _register_sys_event("aio.io_destroy.return", + _GROUP_AIO, _HOOKID_AIO_IO_DESTROY_RETURN, + "INT64", "return"); + + _register_sys_event("aio.io_getevents.entry", + _GROUP_AIO, _HOOKID_AIO_IO_GETEVENTS_ENTRY, "INT64:INT32:INT32:INT64:INT32:INT32", - "ctx_id:min_nr:nr:events_uaddr:tv_sec:tv_nsec") - register_sys_event("aio.io_getevents.return", - GROUP_AIO, HOOKID_AIO_IO_GETEVENTS_RETURN, - "INT64", "return") + "ctx_id:min_nr:nr:events_uaddr:tv_sec:tv_nsec"); + _register_sys_event("aio.io_getevents.return", + _GROUP_AIO, _HOOKID_AIO_IO_GETEVENTS_RETURN, + "INT64", "return"); - register_sys_event("aio.io_cancel.entry", - GROUP_AIO, HOOKID_AIO_IO_CANCEL_ENTRY, + _register_sys_event("aio.io_cancel.entry", + _GROUP_AIO, _HOOKID_AIO_IO_CANCEL_ENTRY, "INT64:INT64:INT64", - "ctx_id:iocb_uaddr:result_uaddr") - register_sys_event("aio.io_cancel.return", - GROUP_AIO, HOOKID_AIO_IO_CANCEL_RETURN, - "INT64", "return") - - reset_maxaction() - - register_sys_event("signal.send.entry", - GROUP_SIGNAL, HOOKID_SIGNAL_SEND_ENTRY, - "INT8:INT8:INT8:INT32", "sig:shared:send2queue:pid") - register_sys_event("signal.send.return", - GROUP_SIGNAL, HOOKID_SIGNAL_SEND_RETURN, - "INT8", "return") - - register_sys_event("signal.syskill.entry", - GROUP_SIGNAL, HOOKID_SIGNAL_SYSKILL_ENTRY, - "INT32:INT8", "pid:sig") - register_sys_event("signal.syskill.return", - GROUP_SIGNAL, HOOKID_SIGNAL_SYSKILL_RETURN, - "INT8", "return") - - register_sys_event("signal.systgkill.entry", - GROUP_SIGNAL, HOOKID_SIGNAL_SYSTGKILL_ENTRY, - "INT32:INT32:INT8", "tid:pid:sig") - register_sys_event("signal.systgkill.return", - GROUP_SIGNAL, HOOKID_SIGNAL_SYSTGKILL_RETURN, - "INT8", "return") - - register_sys_event("signal.systkill.entry", - GROUP_SIGNAL, HOOKID_SIGNAL_SYSTKILL_ENTRY, - "INT32:INT8", "pid:sig") - register_sys_event("signal.systkill.return", - GROUP_SIGNAL, HOOKID_SIGNAL_SYSTKILL_RETURN, - "INT8", "return") - - register_sys_event("signal.pending.entry", - GROUP_SIGNAL, HOOKID_SIGNAL_PENDING_ENTRY, - "INT32:INT32", "sigset_addr:setsize"); - register_sys_event("signal.pending.return", - GROUP_SIGNAL, HOOKID_SIGNAL_PENDING_RETURN, - "INT8", "return") - - register_sys_event("signal.do_action.entry", - GROUP_SIGNAL, HOOKID_SIGNAL_DOACTION_ENTRY, - "INT8:INT64", "sig:handler") - register_sys_event("signal.do_action.return", - GROUP_SIGNAL, HOOKID_SIGNAL_DOACTION_RETURN, - "INT16", "return") - - register_sys_event("signal.procmask.entry", - GROUP_SIGNAL, HOOKID_SIGNAL_PROC_MASK_ENTRY, - "INT8:INT64", "how:sigset") - register_sys_event("signal.procmask.return", - GROUP_SIGNAL, HOOKID_SIGNAL_PROC_MASK_RETURN, - "INT8", "return") - - register_sys_event("signal.flush.entry", - GROUP_SIGNAL, HOOKID_SIGNAL_FLUSH_ENTRY, - "INT32", "pid") - - register_sys_event("sunrpc.clnt.create_client.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CREATE_CLIENT_ENTRY, + "ctx_id:iocb_uaddr:result_uaddr"); + _register_sys_event("aio.io_cancel.return", + _GROUP_AIO, _HOOKID_AIO_IO_CANCEL_RETURN, + "INT64", "return"); + + + _register_sys_event("signal.send.entry", + _GROUP_SIGNAL, _HOOKID_SIGNAL_SEND_ENTRY, + "INT8:INT8:INT8:INT32", "sig:shared:send2queue:pid"); + _register_sys_event("signal.send.return", + _GROUP_SIGNAL, _HOOKID_SIGNAL_SEND_RETURN, + "INT8", "return"); + + _register_sys_event("signal.syskill.entry", + _GROUP_SIGNAL, _HOOKID_SIGNAL_SYSKILL_ENTRY, + "INT32:INT8", "pid:sig"); + _register_sys_event("signal.syskill.return", + _GROUP_SIGNAL, _HOOKID_SIGNAL_SYSKILL_RETURN, + "INT8", "return"); + + _register_sys_event("signal.systgkill.entry", + _GROUP_SIGNAL, _HOOKID_SIGNAL_SYSTGKILL_ENTRY, + "INT32:INT32:INT8", "tid:pid:sig"); + _register_sys_event("signal.systgkill.return", + _GROUP_SIGNAL, _HOOKID_SIGNAL_SYSTGKILL_RETURN, + "INT8", "return"); + + _register_sys_event("signal.systkill.entry", + _GROUP_SIGNAL, _HOOKID_SIGNAL_SYSTKILL_ENTRY, + "INT32:INT8", "pid:sig"); + _register_sys_event("signal.systkill.return", + _GROUP_SIGNAL, _HOOKID_SIGNAL_SYSTKILL_RETURN, + "INT8", "return"); + + _register_sys_event("signal.pending.entry", + _GROUP_SIGNAL, _HOOKID_SIGNAL_PENDING_ENTRY, + "INT32:INT32", "sigset_addr:setsize");; + _register_sys_event("signal.pending.return", + _GROUP_SIGNAL, _HOOKID_SIGNAL_PENDING_RETURN, + "INT8", "return"); + + _register_sys_event("signal.do_action.entry", + _GROUP_SIGNAL, _HOOKID_SIGNAL_DOACTION_ENTRY, + "INT8:INT64", "sig:handler"); + _register_sys_event("signal.do_action.return", + _GROUP_SIGNAL, _HOOKID_SIGNAL_DOACTION_RETURN, + "INT16", "return"); + + _register_sys_event("signal.procmask.entry", + _GROUP_SIGNAL, _HOOKID_SIGNAL_PROC_MASK_ENTRY, + "INT8:INT64", "how:sigset"); + _register_sys_event("signal.procmask.return", + _GROUP_SIGNAL, _HOOKID_SIGNAL_PROC_MASK_RETURN, + "INT8", "return"); + + _register_sys_event("signal.flush.entry", + _GROUP_SIGNAL, _HOOKID_SIGNAL_FLUSH_ENTRY, + "INT32", "pid"); + + _register_sys_event("sunrpc.clnt.create_client.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CREATE_CLIENT_ENTRY, "STRING:INT64:INT8:INT16:INT16:INT8", - "server:prog:vers:prot:port:authflavor") - register_sys_event("sunrpc.clnt.create_client.return", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CREATE_CLIENT_RETURN, - "INT64", "return") + "server:prog:vers:prot:port:authflavor"); + _register_sys_event("sunrpc.clnt.create_client.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CREATE_CLIENT_RETURN, + "INT64", "return"); - register_sys_event("sunrpc.clnt.clone_client.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CLONE_CLIENT_ENTRY, + _register_sys_event("sunrpc.clnt.clone_client.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CLONE_CLIENT_ENTRY, "STRING:INT64:INT16:INT16:INT32", - "server:prog:tasks:clones:rpccount") - register_sys_event("sunrpc.clnt.clone_client.return", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CLONE_CLIENT_RETURN, - "INT64", "return") + "server:prog:tasks:clones:rpccount"); + _register_sys_event("sunrpc.clnt.clone_client.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CLONE_CLIENT_RETURN, + "INT64", "return"); - register_sys_event("sunrpc.clnt.shutdown_client.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_ENTRY, + _register_sys_event("sunrpc.clnt.shutdown_client.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_ENTRY, "STRING:INT64:INT16:INT16:INT32", - "server:prog:clones:tasks:rpccount") - register_sys_event("sunrpc.clnt.shutdown_client.return", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_RETURN, - "INT8", "void") + "server:prog:clones:tasks:rpccount"); + _register_sys_event("sunrpc.clnt.shutdown_client.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_SHUTDOWN_CLIENT_RETURN, + "INT8", "void"); - register_sys_event("sunrpc.clnt.bind_new_program.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_ENTRY, + _register_sys_event("sunrpc.clnt.bind_new_program.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_ENTRY, "STRING:INT64:INT8:INT64:INT8", - "server:old_prog:old_vers:new_prog:new_vers") - register_sys_event("sunrpc.clnt.bind_new_program.return", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_RETURN, - "INT64", "return") + "server:old_prog:old_vers:new_prog:new_vers"); + _register_sys_event("sunrpc.clnt.bind_new_program.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_BIND_NEW_PROGRAM_RETURN, + "INT64", "return"); - register_sys_event("sunrpc.clnt.call_sync.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_SYNC_ENTRY, + _register_sys_event("sunrpc.clnt.call_sync.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CALL_SYNC_ENTRY, "STRING:INT64:INT8:INT64:INT64", - "server:prog:vers:proc:flags") - register_sys_event("sunrpc.clnt.call_sync.return", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_SYNC_RETURN, - "INT64", "return") + "server:prog:vers:proc:flags"); + _register_sys_event("sunrpc.clnt.call_sync.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CALL_SYNC_RETURN, + "INT64", "return"); - register_sys_event("sunrpc.clnt.call_async.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_ASYNC_ENTRY, + _register_sys_event("sunrpc.clnt.call_async.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CALL_ASYNC_ENTRY, "STRING:INT64:INT8:INT64:INT64", - "server:prog:vers:proc:flags") - register_sys_event("sunrpc.clnt.call_async.return", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_CALL_ASYNC_RETURN, - "INT64", "return") - - register_sys_event("sunrpc.clnt.restart_call.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_RESTART_CALL_ENTRY, - "INT64:INT64", "tk_pid:tk_flags") + "server:prog:vers:proc:flags"); + _register_sys_event("sunrpc.clnt.call_async.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_CALL_ASYNC_RETURN, + "INT64", "return"); + + _register_sys_event("sunrpc.clnt.restart_call.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_RESTART_CALL_ENTRY, + "INT64:INT64", "tk_pid:tk_flags"); - register_sys_event("sunrpc.clnt.restart_call.return", - GROUP_SUNRPC, HOOKID_SUNRPC_CLNT_RESTART_CALL_RETURN, - "INT8", "void") + _register_sys_event("sunrpc.clnt.restart_call.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_CLNT_RESTART_CALL_RETURN, + "INT8", "void"); - register_sys_event("sunrpc.svc.register.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_REGISTER_ENTRY, + _register_sys_event("sunrpc.svc.register.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_REGISTER_ENTRY, "STRING:INT64:INT16:INT32", - "service:program:protocol:prot") - register_sys_event("sunrpc.svc.register.return", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_REGISTER_RETURN, - "INT64", "return") + "service:program:protocol:prot"); + _register_sys_event("sunrpc.svc.register.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_REGISTER_RETURN, + "INT64", "return"); - register_sys_event("sunrpc.svc.create.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_CREATE_ENTRY, + _register_sys_event("sunrpc.svc.create.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_CREATE_ENTRY, "INT64:INT8:INT8", - "program:high_version:num_versions") - register_sys_event("sunrpc.svc.create.return", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_CREATE_RETURN, - "INT64", "return") + "program:high_version:num_versions"); + _register_sys_event("sunrpc.svc.create.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_CREATE_RETURN, + "INT64", "return"); - register_sys_event("sunrpc.svc.destroy.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DESTROY_ENTRY, + _register_sys_event("sunrpc.svc.destroy.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_DESTROY_ENTRY, "STRING:INT64:INT32", - "service:program:num_threads") + "service:program:num_threads"); - register_sys_event("sunrpc.svc.destroy.return", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DESTROY_RETURN, - "INT8", "void") + _register_sys_event("sunrpc.svc.destroy.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_DESTROY_RETURN, + "INT8", "void"); - register_sys_event("sunrpc.svc.process.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_PROCESS_ENTRY, + _register_sys_event("sunrpc.svc.process.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_PROCESS_ENTRY, "STRING:INT64:INT64:INT64:INT64:INT8:INT8", - "service:sv_prog:peer_ip:rq_xid:rq_prog:rq_vers:rq_proc") - register_sys_event("sunrpc.svc.process.return", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_PROCESS_RETURN, - "INT64", "return") + "service:sv_prog:peer_ip:rq_xid:rq_prog:rq_vers:rq_proc"); + _register_sys_event("sunrpc.svc.process.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_PROCESS_RETURN, + "INT64", "return"); - register_sys_event("sunrpc.svc.authorise.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_AUTHORISE_ENTRY, + _register_sys_event("sunrpc.svc.authorise.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_AUTHORISE_ENTRY, "INT64:INT64:INT64:INT8:INT64", - "peer_ip:xid:prog:vers:proc") - register_sys_event("sunrpc.svc.authorise.return", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_AUTHORISE_RETURN, - "INT64", "return") + "peer_ip:xid:prog:vers:proc"); + _register_sys_event("sunrpc.svc.authorise.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_AUTHORISE_RETURN, + "INT64", "return"); - register_sys_event("sunrpc.svc.send.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_SEND_ENTRY, + _register_sys_event("sunrpc.svc.send.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_SEND_ENTRY, "STRING:INT64:INT64:INT64:INT64:INT8:INT64", - "sv_name:peer_ip:sv_prog:xid:prog:vers:proc") - register_sys_event("sunrpc.svc.send.return", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_SEND_RETURN, - "INT64", "return") - - register_sys_event("sunrpc.svc.recv.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_RECV_ENTRY, - "STRING:INT64", "sv_name:timeout") + "sv_name:peer_ip:sv_prog:xid:prog:vers:proc"); + _register_sys_event("sunrpc.svc.send.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_SEND_RETURN, + "INT64", "return"); + + _register_sys_event("sunrpc.svc.recv.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_RECV_ENTRY, + "STRING:INT64", "sv_name:timeout"); - register_sys_event("sunrpc.svc.recv.return", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_RECV_RETURN, - "INT64", "return") + _register_sys_event("sunrpc.svc.recv.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_RECV_RETURN, + "INT64", "return"); - register_sys_event("sunrpc.svc.drop.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DROP_ENTRY, + _register_sys_event("sunrpc.svc.drop.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_DROP_ENTRY, "STRING:INT64:INT64:INT64:INT8:INT64", - "sv_name:peer_ip:xid:prog:vers:proc") + "sv_name:peer_ip:xid:prog:vers:proc"); - register_sys_event("sunrpc.svc.drop.return", - GROUP_SUNRPC, HOOKID_SUNRPC_SVC_DROP_RETURN, - "INT8", "void") + _register_sys_event("sunrpc.svc.drop.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SVC_DROP_RETURN, + "INT8", "void"); - register_sys_event("sunrpc.sched.new_task.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_NEW_TASK_ENTRY, + _register_sys_event("sunrpc.sched.new_task.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_NEW_TASK_ENTRY, "INT64:INT64:INT8:INT64:INT64", - "xid:prog:vers:prot:flags") - register_sys_event("sunrpc.sched.new_task.return", - GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_NEW_TASK_RETURN, - "INT64", "return") + "xid:prog:vers:prot:flags"); + _register_sys_event("sunrpc.sched.new_task.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_NEW_TASK_RETURN, + "INT64", "return"); - register_sys_event("sunrpc.sched.release_task.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_RELEASE_TASK_ENTRY, + _register_sys_event("sunrpc.sched.release_task.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_RELEASE_TASK_ENTRY, "INT64:INT64:INT8:INT64:INT64", - "xid:prog:vers:prot:flags") - register_sys_event("sunrpc.sched.release_task.return", - GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_RELEASE_TASK_RETURN, - "INT8", "void") + "xid:prog:vers:prot:flags"); + _register_sys_event("sunrpc.sched.release_task.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_RELEASE_TASK_RETURN, + "INT8", "void"); - register_sys_event("sunrpc.sched.execute.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_EXECUTE_ENTRY, + _register_sys_event("sunrpc.sched.execute.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_EXECUTE_ENTRY, "INT64:INT64:INT8:INT64:INT64:INT64", - "xid:prog:vers:prot:tk_pid:tk_flags") - register_sys_event("sunrpc.sched.execute.return", - GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_EXECUTE_RETURN, - "INT64", "return") + "xid:prog:vers:prot:tk_pid:tk_flags"); + _register_sys_event("sunrpc.sched.execute.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_EXECUTE_RETURN, + "INT64", "return"); - register_sys_event("sunrpc.sched.delay.entry", - GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_DELAY_ENTRY, + _register_sys_event("sunrpc.sched.delay.entry", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_DELAY_ENTRY, "INT64:INT64:INT64:INT64:INT64", - "xid:prog:tk_pid:tk_flags:delay") - register_sys_event("sunrpc.sched.delay.return", - GROUP_SUNRPC, HOOKID_SUNRPC_SCHED_DELAY_RETURN, - "INT8", "void") + "xid:prog:tk_pid:tk_flags:delay"); + _register_sys_event("sunrpc.sched.delay.return", + _GROUP_SUNRPC, _HOOKID_SUNRPC_SCHED_DELAY_RETURN, + "INT8", "void"); - register_sys_event("cpu_freq", - GROUP_CPUFREQ, HOOKID_SWITCH_CPUFREQ, - "INT64", "cpufreq") + _register_sys_event("cpu_freq", + _GROUP_CPUFREQ, _HOOKID_SWITCH_CPUFREQ, + "INT64", "cpufreq"); - register_sys_event("nfs.fop.llseek.entry", - GROUP_NFS, HOOKID_NFS_FOP_LLSEEK_ENTRY, + _register_sys_event("nfs.fop.llseek.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_LLSEEK_ENTRY, "INT8:INT8:INT64:INT64:INT8", - "major:minor:ino:offset:origin") - register_sys_event("nfs.fop.llseek.return", - GROUP_NFS, HOOKID_NFS_FOP_LLSEEK_RETURN, - "INT32","return") + "major:minor:ino:offset:origin"); + _register_sys_event("nfs.fop.llseek.return", + _GROUP_NFS, _HOOKID_NFS_FOP_LLSEEK_RETURN, + "INT32","return"); - register_sys_event("nfs.fop.read.entry", - GROUP_NFS, HOOKID_NFS_FOP_READ_ENTRY, + _register_sys_event("nfs.fop.read.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_READ_ENTRY, "INT8:INT8:INT64:INT64:INT64:INT64", - "major:minor:ino:buf:len:pos") - register_sys_event("nfs.fop.read.return", - GROUP_NFS, HOOKID_NFS_FOP_READ_RETURN, - "INT32","return") + "major:minor:ino:buf:len:pos"); + _register_sys_event("nfs.fop.read.return", + _GROUP_NFS, _HOOKID_NFS_FOP_READ_RETURN, + "INT32","return"); - register_sys_event("nfs.fop.write.entry", - GROUP_NFS, HOOKID_NFS_FOP_WRITE_ENTRY, + _register_sys_event("nfs.fop.write.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_WRITE_ENTRY, "INT8:INT8:INT64:INT64:INT64:INT64", - "major:minor:ino:buf:len:pos") - register_sys_event("nfs.fop.write.return", - GROUP_NFS, HOOKID_NFS_FOP_WRITE_RETURN, - "INT32","return") + "major:minor:ino:buf:len:pos"); + _register_sys_event("nfs.fop.write.return", + _GROUP_NFS, _HOOKID_NFS_FOP_WRITE_RETURN, + "INT32","return"); - register_sys_event("nfs.fop.aio_read.entry", - GROUP_NFS, HOOKID_NFS_FOP_AIOREAD_ENTRY, + _register_sys_event("nfs.fop.aio_read.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_AIOREAD_ENTRY, "INT8:INT8:INT64:INT64:INT64:INT64", - "major:minor:ino:buf:len:pos") - register_sys_event("nfs.fop.aio_read.return", - GROUP_NFS, HOOKID_NFS_FOP_AIOREAD_RETURN, - "INT32","return") + "major:minor:ino:buf:len:pos"); + _register_sys_event("nfs.fop.aio_read.return", + _GROUP_NFS, _HOOKID_NFS_FOP_AIOREAD_RETURN, + "INT32","return"); - register_sys_event("nfs.fop.aio_write.entry", - GROUP_NFS, HOOKID_NFS_FOP_AIOWRITE_ENTRY, + _register_sys_event("nfs.fop.aio_write.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_AIOWRITE_ENTRY, "INT8:INT8:INT64:INT64:INT64:INT64", - "major:minor:ino:buf:len:pos") - register_sys_event("nfs.fop.aio_write.return", - GROUP_NFS, HOOKID_NFS_FOP_AIOWRITE_RETURN, - "INT32","return") + "major:minor:ino:buf:len:pos"); + _register_sys_event("nfs.fop.aio_write.return", + _GROUP_NFS, _HOOKID_NFS_FOP_AIOWRITE_RETURN, + "INT32","return"); - register_sys_event("nfs.fop.mmap.entry", - GROUP_NFS, HOOKID_NFS_FOP_MMAP_ENTRY, + _register_sys_event("nfs.fop.mmap.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_MMAP_ENTRY, "INT8:INT8:INT64:INT64:INT64:INT32", - "major:minor:ino:vm_start:vm_end:vm_flags") - register_sys_event("nfs.fop.mmap.return", - GROUP_NFS, HOOKID_NFS_FOP_MMAP_RETURN, - "INT32","return") + "major:minor:ino:vm_start:vm_end:vm_flags"); + _register_sys_event("nfs.fop.mmap.return", + _GROUP_NFS, _HOOKID_NFS_FOP_MMAP_RETURN, + "INT32","return"); - register_sys_event("nfs.fop.open.entry", - GROUP_NFS, HOOKID_NFS_FOP_OPEN_ENTRY, + _register_sys_event("nfs.fop.open.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_OPEN_ENTRY, "INT8:INT8:INT64:INT32:STRING", - "major:minor:ino:flag:filename") - register_sys_event("nfs.fop.open.return", - GROUP_NFS, HOOKID_NFS_FOP_OPEN_RETURN, - "INT32","return") + "major:minor:ino:flag:filename"); + _register_sys_event("nfs.fop.open.return", + _GROUP_NFS, _HOOKID_NFS_FOP_OPEN_RETURN, + "INT32","return"); - register_sys_event("nfs.fop.flush.entry", - GROUP_NFS, HOOKID_NFS_FOP_FLUSH_ENTRY, + _register_sys_event("nfs.fop.flush.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_FLUSH_ENTRY, "INT8:INT8:INT64:INT32", - "major:minor:ino:ndirty") - register_sys_event("nfs.fop.flush.return", - GROUP_NFS, HOOKID_NFS_FOP_FLUSH_RETURN, - "INT32","return") + "major:minor:ino:ndirty"); + _register_sys_event("nfs.fop.flush.return", + _GROUP_NFS, _HOOKID_NFS_FOP_FLUSH_RETURN, + "INT32","return"); - register_sys_event("nfs.fop.release.entry", - GROUP_NFS, HOOKID_NFS_FOP_RELEASE_ENTRY, + _register_sys_event("nfs.fop.release.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_RELEASE_ENTRY, "INT8:INT8:INT64:INT16", - "major:minor:ino:mode") - register_sys_event("nfs.fop.release.return", - GROUP_NFS, HOOKID_NFS_FOP_RELEASE_RETURN, - "INT32","return") + "major:minor:ino:mode"); + _register_sys_event("nfs.fop.release.return", + _GROUP_NFS, _HOOKID_NFS_FOP_RELEASE_RETURN, + "INT32","return"); - register_sys_event("nfs.fop.fsync.entry", - GROUP_NFS, HOOKID_NFS_FOP_FSYNC_ENTRY, + _register_sys_event("nfs.fop.fsync.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_FSYNC_ENTRY, "INT8:INT8:INT64:INT32", - "major:minor:ino:ndirty") - register_sys_event("nfs.fop.fsync.return", - GROUP_NFS, HOOKID_NFS_FOP_FSYNC_RETURN, - "INT32","return") + "major:minor:ino:ndirty"); + _register_sys_event("nfs.fop.fsync.return", + _GROUP_NFS, _HOOKID_NFS_FOP_FSYNC_RETURN, + "INT32","return"); - register_sys_event("nfs.fop.lock.entry", - GROUP_NFS, HOOKID_NFS_FOP_LOCK_ENTRY, + _register_sys_event("nfs.fop.lock.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_LOCK_ENTRY, "INT8:INT8:INT64:INT64:INT64:INT8:INT8:INT32", - "major:minor:ino:fl_start:fl_end:fl_type:fl_flag:cmd") - register_sys_event("nfs.fop.lock.return", - GROUP_NFS, HOOKID_NFS_FOP_LOCK_RETURN, - "INT32","return") + "major:minor:ino:fl_start:fl_end:fl_type:fl_flag:cmd"); + _register_sys_event("nfs.fop.lock.return", + _GROUP_NFS, _HOOKID_NFS_FOP_LOCK_RETURN, + "INT32","return"); - register_sys_event("nfs.fop.sendfile.entry", - GROUP_NFS, HOOKID_NFS_FOP_SENDFILE_ENTRY, + _register_sys_event("nfs.fop.sendfile.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_SENDFILE_ENTRY, "INT8:INT8:INT64:INT64:INT64", - "major:minor:ino:count:pos") - register_sys_event("nfs.fop.sendfile.return", - GROUP_NFS, HOOKID_NFS_FOP_SENDFILE_RETURN, - "INT32","return") - - register_sys_event("nfs.fop.check_flags.entry", - GROUP_NFS, HOOKID_NFS_FOP_CHECKFLAGS_ENTRY, - "INT32","flag") - register_sys_event("nfs.fop.check_flags.return", - GROUP_NFS, HOOKID_NFS_FOP_CHECKFLAGS_RETURN, - "INT32","return") - - register_sys_event("nfs.aop.readpage.entry", - GROUP_NFS, HOOKID_NFS_AOP_READPAGE_ENTRY, + "major:minor:ino:count:pos"); + _register_sys_event("nfs.fop.sendfile.return", + _GROUP_NFS, _HOOKID_NFS_FOP_SENDFILE_RETURN, + "INT32","return"); + + _register_sys_event("nfs.fop.check_flags.entry", + _GROUP_NFS, _HOOKID_NFS_FOP_CHECKFLAGS_ENTRY, + "INT32","flag"); + _register_sys_event("nfs.fop.check_flags.return", + _GROUP_NFS, _HOOKID_NFS_FOP_CHECKFLAGS_RETURN, + "INT32","return"); + + _register_sys_event("nfs.aop.readpage.entry", + _GROUP_NFS, _HOOKID_NFS_AOP_READPAGE_ENTRY, "INT64:INT32:INT64:INT64", - "ino:rsize:__page:page_index") - register_sys_event("nfs.aop.readpage.return", - GROUP_NFS, HOOKID_NFS_AOP_READPAGE_RETURN, - "INT32","return") + "ino:rsize:__page:page_index"); + _register_sys_event("nfs.aop.readpage.return", + _GROUP_NFS, _HOOKID_NFS_AOP_READPAGE_RETURN, + "INT32","return"); - register_sys_event("nfs.aop.readpages.entry", - GROUP_NFS, HOOKID_NFS_AOP_READPAGES_ENTRY, + _register_sys_event("nfs.aop.readpages.entry", + _GROUP_NFS, _HOOKID_NFS_AOP_READPAGES_ENTRY, "INT64:INT32:INT32", - "ino:rpages:nr_pages") - register_sys_event("nfs.aop.readpages.return", - GROUP_NFS, HOOKID_NFS_AOP_READPAGES_RETURN, - "INT32","return") + "ino:rpages:nr_pages"); + _register_sys_event("nfs.aop.readpages.return", + _GROUP_NFS, _HOOKID_NFS_AOP_READPAGES_RETURN, + "INT32","return"); - register_sys_event("nfs.aop.writepage.entry", - GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGE_ENTRY, + _register_sys_event("nfs.aop.writepage.entry", + _GROUP_NFS, _HOOKID_NFS_AOP_WRITEPAGE_ENTRY, "INT64:INT32:INT64:INT64", - "ino:wsize:__page:page_index") - register_sys_event("nfs.aop.writepage.return", - GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGE_RETURN, - "INT32","return") + "ino:wsize:__page:page_index"); + _register_sys_event("nfs.aop.writepage.return", + _GROUP_NFS, _HOOKID_NFS_AOP_WRITEPAGE_RETURN, + "INT32","return"); - register_sys_event("nfs.aop.writepages.entry", - GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGES_ENTRY, + _register_sys_event("nfs.aop.writepages.entry", + _GROUP_NFS, _HOOKID_NFS_AOP_WRITEPAGES_ENTRY, "INT64:INT32:INT64", - "ino:wpages:nr_to_write") - register_sys_event("nfs.aop.writepages.return", - GROUP_NFS, HOOKID_NFS_AOP_WRITEPAGES_RETURN, - "INT32","return") + "ino:wpages:nr_to_write"); + _register_sys_event("nfs.aop.writepages.return", + _GROUP_NFS, _HOOKID_NFS_AOP_WRITEPAGES_RETURN, + "INT32","return"); - register_sys_event("nfs.aop.prepare_write.entry", - GROUP_NFS, HOOKID_NFS_AOP_PREPAREWRITE_ENTRY, + _register_sys_event("nfs.aop.prepare_write.entry", + _GROUP_NFS, _HOOKID_NFS_AOP_PREPAREWRITE_ENTRY, "INT64:INT64:INT64", - "ino:__page:page_index") - register_sys_event("nfs.aop.prepare_write.return", - GROUP_NFS, HOOKID_NFS_AOP_PREPAREWRITE_RETURN, - "INT32","return") + "ino:__page:page_index"); + _register_sys_event("nfs.aop.prepare_write.return", + _GROUP_NFS, _HOOKID_NFS_AOP_PREPAREWRITE_RETURN, + "INT32","return"); - register_sys_event("nfs.aop.commit_write.entry", - GROUP_NFS, HOOKID_NFS_AOP_COMMITWRITE_ENTRY, + _register_sys_event("nfs.aop.commit_write.entry", + _GROUP_NFS, _HOOKID_NFS_AOP_COMMITWRITE_ENTRY, "INT64:INT64:INT64:INT32:INT32", - "ino:__page:page_index:offset:count") - register_sys_event("nfs.aop.commit_write.return", - GROUP_NFS, HOOKID_NFS_AOP_COMMITWRITE_RETURN, - "INT32","return") + "ino:__page:page_index:offset:count"); + _register_sys_event("nfs.aop.commit_write.return", + _GROUP_NFS, _HOOKID_NFS_AOP_COMMITWRITE_RETURN, + "INT32","return"); - register_sys_event("nfs.aop.set_page_dirty.entry", - GROUP_NFS, HOOKID_NFS_AOP_SETPAGEDIRTY_ENTRY, + _register_sys_event("nfs.aop.set_page_dirty.entry", + _GROUP_NFS, _HOOKID_NFS_AOP_SETPAGEDIRTY_ENTRY, "INT64:INT8", - "__page:page_flag") - register_sys_event("nfs.aop.set_page_dirty.return", - GROUP_NFS, HOOKID_NFS_AOP_SETPAGEDIRTY_RETURN, - "INT32","return") + "__page:page_flag"); + _register_sys_event("nfs.aop.set_page_dirty.return", + _GROUP_NFS, _HOOKID_NFS_AOP_SETPAGEDIRTY_RETURN, + "INT32","return"); - register_sys_event("nfs.aop.release_page.entry", - GROUP_NFS, HOOKID_NFS_AOP_RELEASEPAGE_ENTRY, + _register_sys_event("nfs.aop.release_page.entry", + _GROUP_NFS, _HOOKID_NFS_AOP_RELEASEPAGE_ENTRY, "INT64:INT64", - "__page:page_index") - register_sys_event("nfs.aop.release_page.return", - GROUP_NFS, HOOKID_NFS_AOP_RELEASEPAGE_RETURN, - "INT32","return") + "__page:page_index"); + _register_sys_event("nfs.aop.release_page.return", + _GROUP_NFS, _HOOKID_NFS_AOP_RELEASEPAGE_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.lookup.entry", - GROUP_NFS, HOOKID_NFS_PROC_LOOKUP_ENTRY, + _register_sys_event("nfs.proc.lookup.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_LOOKUP_ENTRY, "INT8:INT8:INT64:INT8:STRING", - "major_device:minor_device:fileid:version:filename") - register_sys_event("nfs.proc.lookup.return", - GROUP_NFS, HOOKID_NFS_PROC_LOOKUP_RETURN, - "INT32","return") + "major_device:minor_device:fileid:version:filename"); + _register_sys_event("nfs.proc.lookup.return", + _GROUP_NFS, _HOOKID_NFS_PROC_LOOKUP_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.read.entry", - GROUP_NFS, HOOKID_NFS_PROC_READ_ENTRY, + _register_sys_event("nfs.proc.read.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_READ_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT64", - "major_device:minor_device:fileid:version:count:offset") - register_sys_event("nfs.proc.read.return", - GROUP_NFS, HOOKID_NFS_PROC_READ_RETURN, - "INT32","return") + "major_device:minor_device:fileid:version:count:offset"); + _register_sys_event("nfs.proc.read.return", + _GROUP_NFS, _HOOKID_NFS_PROC_READ_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.write.entry", - GROUP_NFS, HOOKID_NFS_PROC_WRITE_ENTRY, + _register_sys_event("nfs.proc.write.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_WRITE_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT64", - "major_device:minor_device:fileid:version:count:offset") - register_sys_event("nfs.proc.write.return", - GROUP_NFS, HOOKID_NFS_PROC_WRITE_RETURN, - "INT32","return") + "major_device:minor_device:fileid:version:count:offset"); + _register_sys_event("nfs.proc.write.return", + _GROUP_NFS, _HOOKID_NFS_PROC_WRITE_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.commit.entry", - GROUP_NFS, HOOKID_NFS_PROC_COMMIT_ENTRY, + _register_sys_event("nfs.proc.commit.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_COMMIT_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT64", - "major_device:minor_device:fileid:version:count:offset") - register_sys_event("nfs.proc.commit.return", - GROUP_NFS, HOOKID_NFS_PROC_COMMIT_RETURN, - "INT32","return") + "major_device:minor_device:fileid:version:count:offset"); + _register_sys_event("nfs.proc.commit.return", + _GROUP_NFS, _HOOKID_NFS_PROC_COMMIT_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.read_setup.entry", - GROUP_NFS, HOOKID_NFS_PROC_READSETUP_ENTRY, + _register_sys_event("nfs.proc.read_setup.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_READSETUP_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT64", - "major_device:minor_device:fileid:version:count:offset") - register_sys_event("nfs.proc.write_setup.entry", - GROUP_NFS, HOOKID_NFS_PROC_WRITESETUP_ENTRY, + "major_device:minor_device:fileid:version:count:offset"); + _register_sys_event("nfs.proc.write_setup.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_WRITESETUP_ENTRY, "INT8:INT8:INT64:INT8:INT8:INT32:INT64", - "major_device:minor_device:fileid:version:how:count:offset") + "major_device:minor_device:fileid:version:how:count:offset"); - register_sys_event("nfs.proc.commit_setup.entry", - GROUP_NFS, HOOKID_NFS_PROC_COMMITSETUP_ENTRY, + _register_sys_event("nfs.proc.commit_setup.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_COMMITSETUP_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT64", - "major_device:minor_device:fileid:version:count:offset") + "major_device:minor_device:fileid:version:count:offset"); - register_sys_event("nfs.proc.read_done.entry", - GROUP_NFS, HOOKID_NFS_PROC_READDONE_ENTRY, + _register_sys_event("nfs.proc.read_done.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_READDONE_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT32", - "major_device:minor_device:fileid:version:status:count") - register_sys_event("nfs.proc.read_done.return", - GROUP_NFS, HOOKID_NFS_PROC_READDONE_RETURN, - "INT32","return") + "major_device:minor_device:fileid:version:status:count"); + _register_sys_event("nfs.proc.read_done.return", + _GROUP_NFS, _HOOKID_NFS_PROC_READDONE_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.write_done.entry", - GROUP_NFS, HOOKID_NFS_PROC_WRITEDONE_ENTRY, + _register_sys_event("nfs.proc.write_done.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_WRITEDONE_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT32", - "major_device:minor_device:fileid:version:status:count") - register_sys_event("nfs.proc.write_done.return", - GROUP_NFS, HOOKID_NFS_PROC_WRITEDONE_RETURN, - "INT32","return") + "major_device:minor_device:fileid:version:status:count"); + _register_sys_event("nfs.proc.write_done.return", + _GROUP_NFS, _HOOKID_NFS_PROC_WRITEDONE_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.commit_done.entry", - GROUP_NFS, HOOKID_NFS_PROC_COMMITDONE_ENTRY, + _register_sys_event("nfs.proc.commit_done.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_COMMITDONE_ENTRY, "INT8:INT8:INT64:INT8:INT32:INT32", - "major_device:minor_device:fileid:version:status:count") - register_sys_event("nfs.proc.commit_done.return", - GROUP_NFS, HOOKID_NFS_PROC_COMMITDONE_RETURN, - "INT32","return") + "major_device:minor_device:fileid:version:status:count"); + _register_sys_event("nfs.proc.commit_done.return", + _GROUP_NFS, _HOOKID_NFS_PROC_COMMITDONE_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.open.entry", - GROUP_NFS, HOOKID_NFS_PROC_OPEN_ENTRY, + _register_sys_event("nfs.proc.open.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_OPEN_ENTRY, "INT8:INT8:INT64:INT8:STRING:INT32:INT32", - "major_device:minor_device:fileid:version:filename:flag:mode") - register_sys_event("nfs.proc.open.return", - GROUP_NFS, HOOKID_NFS_PROC_OPEN_RETURN, - "INT32","return") + "major_device:minor_device:fileid:version:filename:flag:mode"); + _register_sys_event("nfs.proc.open.return", + _GROUP_NFS, _HOOKID_NFS_PROC_OPEN_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.release.entry", - GROUP_NFS, HOOKID_NFS_PROC_RELEASE_ENTRY, + _register_sys_event("nfs.proc.release.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_RELEASE_ENTRY, "INT8:INT8:INT64:INT8:STRING:INT32:INT32", - "major_device:minor_device:fileid:version:filename:flag:mode") - register_sys_event("nfs.proc.release.return", - GROUP_NFS, HOOKID_NFS_PROC_RELEASE_RETURN, - "INT32","return") + "major_device:minor_device:fileid:version:filename:flag:mode"); + _register_sys_event("nfs.proc.release.return", + _GROUP_NFS, _HOOKID_NFS_PROC_RELEASE_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.create.entry", - GROUP_NFS, HOOKID_NFS_PROC_CREATE_ENTRY, + _register_sys_event("nfs.proc.create.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_CREATE_ENTRY, "INT8:INT8:INT64:INT8:STRING:INT32", - "major_device:minor_device:fileid:version:filename:mode") - register_sys_event("nfs.proc.create.return", - GROUP_NFS, HOOKID_NFS_PROC_CREATE_RETURN, - "INT32","return") + "major_device:minor_device:fileid:version:filename:mode"); + _register_sys_event("nfs.proc.create.return", + _GROUP_NFS, _HOOKID_NFS_PROC_CREATE_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.rename.entry", - GROUP_NFS, HOOKID_NFS_PROC_RENAME_ENTRY, + _register_sys_event("nfs.proc.rename.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_RENAME_ENTRY, "INT8:INT8:INT8:INT64:STRING:INT8:INT8:INT64:STRING", - "version:major_old:minor_old:fileid_old:filename_old:major_new:minor_new:fileid_new:filename_new") - register_sys_event("nfs.proc.rename.return", - GROUP_NFS, HOOKID_NFS_PROC_RENAME_RETURN, - "INT32","return") + "version:major_old:minor_old:fileid_old:filename_old:major_new:minor_new:fileid_new:filename_new"); + _register_sys_event("nfs.proc.rename.return", + _GROUP_NFS, _HOOKID_NFS_PROC_RENAME_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.create.entry", - GROUP_NFS, HOOKID_NFS_PROC_CREATE_ENTRY, + _register_sys_event("nfs.proc.create.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_CREATE_ENTRY, "INT8:INT8:INT64:INT8:STRING", - "major_device:minor_device:fileid:version:filename") - register_sys_event("nfs.proc.create.return", - GROUP_NFS, HOOKID_NFS_PROC_CREATE_RETURN, - "INT32","return") + "major_device:minor_device:fileid:version:filename"); + _register_sys_event("nfs.proc.create.return", + _GROUP_NFS, _HOOKID_NFS_PROC_CREATE_RETURN, + "INT32","return"); - register_sys_event("nfs.proc.remove.entry", - GROUP_NFS, HOOKID_NFS_PROC_REMOVE_ENTRY, + _register_sys_event("nfs.proc.remove.entry", + _GROUP_NFS, _HOOKID_NFS_PROC_REMOVE_ENTRY, "INT8:INT8:INT64:INT8:STRING", - "major_dev:minor_dev:field_id:version:filename"); - register_sys_event("nfs.proc.remove.return", - GROUP_NFS, HOOKID_NFS_PROC_REMOVE_RETURN, - "INT32", "return"); + "major_dev:minor_dev:field_id:version:filename");; + _register_sys_event("nfs.proc.remove.return", + _GROUP_NFS, _HOOKID_NFS_PROC_REMOVE_RETURN, + "INT32", "return");; - reset_maxaction() - register_sys_event("nfsd.dispatch.entry", - GROUP_NFSD, HOOKID_NFSD_DISPATCH_ENTRY, + _register_sys_event("nfsd.dispatch.entry", + _GROUP_NFSD, _HOOKID_NFSD_DISPATCH_ENTRY, "INT8:INT8:INT32:INT32:INT32:INT32", - "proto:version:xid:proc:prog:client_ip") - register_sys_event("nfsd.dispatch.return", - GROUP_NFSD, HOOKID_NFSD_DISPATCH_RETURN, - "INT32","return") + "proto:version:xid:proc:prog:client_ip"); + _register_sys_event("nfsd.dispatch.return", + _GROUP_NFSD, _HOOKID_NFSD_DISPATCH_RETURN, + "INT32","return"); - register_sys_event("nfsd.open.entry", - GROUP_NFSD, HOOKID_NFSD_OPEN_ENTRY, + _register_sys_event("nfsd.open.entry", + _GROUP_NFSD, _HOOKID_NFSD_OPEN_ENTRY, "INT8:INT64:INT64:INT64:INT32:INT8", - "size:ino0:ino1:ino2:type:access") - register_sys_event("nfsd.open.return", - GROUP_NFSD, HOOKID_NFSD_OPEN_RETURN, - "INT32","return") + "size:ino0:ino1:ino2:type:access"); + _register_sys_event("nfsd.open.return", + _GROUP_NFSD, _HOOKID_NFSD_OPEN_RETURN, + "INT32","return"); - register_sys_event("nfsd.read.entry", - GROUP_NFSD, HOOKID_NFSD_READ_ENTRY, + _register_sys_event("nfsd.read.entry", + _GROUP_NFSD, _HOOKID_NFSD_READ_ENTRY, "INT8:INT64:INT64:INT64:INT64:INT64:INT64:INT64", - "size:ino0:ino1:ino2:count:offset:iov_len:vlen") - register_sys_event("nfsd.read.return", - GROUP_NFSD, HOOKID_NFSD_READ_RETURN, - "INT32","return") + "size:ino0:ino1:ino2:count:offset:iov_len:vlen"); + _register_sys_event("nfsd.read.return", + _GROUP_NFSD, _HOOKID_NFSD_READ_RETURN, + "INT32","return"); - register_sys_event("nfsd.write.entry", - GROUP_NFSD, HOOKID_NFSD_WRITE_ENTRY, + _register_sys_event("nfsd.write.entry", + _GROUP_NFSD, _HOOKID_NFSD_WRITE_ENTRY, "INT8:INT64:INT64:INT64:INT64:INT64:INT64:INT64", - "size:ino0:ino1:ino2:count:offset:iov_len:vlen") - register_sys_event("nfsd.write.return", - GROUP_NFSD, HOOKID_NFSD_WRITE_RETURN, - "INT32","return") + "size:ino0:ino1:ino2:count:offset:iov_len:vlen"); + _register_sys_event("nfsd.write.return", + _GROUP_NFSD, _HOOKID_NFSD_WRITE_RETURN, + "INT32","return"); - register_sys_event("nfsd.lookup.entry", - GROUP_NFSD, HOOKID_NFSD_LOOKUP_ENTRY, + _register_sys_event("nfsd.lookup.entry", + _GROUP_NFSD, _HOOKID_NFSD_LOOKUP_ENTRY, "INT8:INT64:INT64:INT64:STRING", - "size:ino0:ino1:ino2:filename") - register_sys_event("nfsd.lookup.return", - GROUP_NFSD, HOOKID_NFSD_LOOKUP_RETURN, - "INT32","return") + "size:ino0:ino1:ino2:filename"); + _register_sys_event("nfsd.lookup.return", + _GROUP_NFSD, _HOOKID_NFSD_LOOKUP_RETURN, + "INT32","return"); - register_sys_event("nfsd.commit.entry", - GROUP_NFSD, HOOKID_NFSD_COMMIT_ENTRY, + _register_sys_event("nfsd.commit.entry", + _GROUP_NFSD, _HOOKID_NFSD_COMMIT_ENTRY, "INT8:INT64:INT64:INT64:INT64:INT64", - "size:ino0:ino1:ino2:count:offset") - register_sys_event("nfsd.commit.return", - GROUP_NFSD, HOOKID_NFSD_COMMIT_RETURN, - "INT32","return") + "size:ino0:ino1:ino2:count:offset"); + _register_sys_event("nfsd.commit.return", + _GROUP_NFSD, _HOOKID_NFSD_COMMIT_RETURN, + "INT32","return"); - register_sys_event("nfsd.create.entry", - GROUP_NFSD, HOOKID_NFSD_CREATE_ENTRY, + _register_sys_event("nfsd.create.entry", + _GROUP_NFSD, _HOOKID_NFSD_CREATE_ENTRY, "INT8:INT64:INT64:INT64:STRING:INT32:INT16:INT32", - "size:ino0:ino1:ino2:filename:type:iap_valid:iap_mode") - register_sys_event("nfsd.create.return", - GROUP_NFSD, HOOKID_NFSD_CREATE_RETURN, - "INT32","return") + "size:ino0:ino1:ino2:filename:type:iap_valid:iap_mode"); + _register_sys_event("nfsd.create.return", + _GROUP_NFSD, _HOOKID_NFSD_CREATE_RETURN, + "INT32","return"); - register_sys_event("nfsd.createv3.entry", - GROUP_NFSD, HOOKID_NFSD_CREATEV3_ENTRY, + _register_sys_event("nfsd.createv3.entry", + _GROUP_NFSD, _HOOKID_NFSD_CREATEV3_ENTRY, "INT8:INT64:INT64:INT64:STRING:INT8:INT16:INT32", - "size:ino0:ino1:ino2:filename:createmode:iap_valid:iap_mode") - register_sys_event("nfsd.createv3.return", - GROUP_NFSD, HOOKID_NFSD_CREATEV3_RETURN, - "INT32","return") + "size:ino0:ino1:ino2:filename:createmode:iap_valid:iap_mode"); + _register_sys_event("nfsd.createv3.return", + _GROUP_NFSD, _HOOKID_NFSD_CREATEV3_RETURN, + "INT32","return"); - register_sys_event("nfsd.unlink.entry", - GROUP_NFSD, HOOKID_NFSD_UNLINK_ENTRY, + _register_sys_event("nfsd.unlink.entry", + _GROUP_NFSD, _HOOKID_NFSD_UNLINK_ENTRY, "INT8:INT64:INT64:INT64:STRING:INT32", - "size:ino0:ino1:ino2:filename:type") - register_sys_event("nfsd.unlink.return", - GROUP_NFSD, HOOKID_NFSD_UNLINK_RETURN, - "INT32","return") + "size:ino0:ino1:ino2:filename:type"); + _register_sys_event("nfsd.unlink.return", + _GROUP_NFSD, _HOOKID_NFSD_UNLINK_RETURN, + "INT32","return"); - register_sys_event("nfsd.rename.entry", - GROUP_NFSD, HOOKID_NFSD_RENAME_ENTRY, + _register_sys_event("nfsd.rename.entry", + _GROUP_NFSD, _HOOKID_NFSD_RENAME_ENTRY, "INT8:INT64:INT64:INT64:STRING:INT8:INT64:INT64:INT64:STRING", - "old_size:old_ino0:old_ino1:old_ino2:old_filename:size:ino0:ino1:ino2:filename") - register_sys_event("nfsd.rename.return", - GROUP_NFSD, HOOKID_NFSD_RENAME_RETURN, - "INT32","return") - - register_sys_event("nfsd.close.entry", - GROUP_NFSD, HOOKID_NFSD_CLOSE_ENTRY, - "STRING", "filename") - register_sys_event("nfsd.close.return", - GROUP_NFSD, HOOKID_NFSD_CLOSE_RETURN, - "INT32","return") - - register_sys_event("nfsd.proc.lookup.entry", - GROUP_NFSD, HOOKID_NFSD_PROC_LOOKUP_ENTRY, + "old_size:old_ino0:old_ino1:old_ino2:old_filename:size:ino0:ino1:ino2:filename"); + _register_sys_event("nfsd.rename.return", + _GROUP_NFSD, _HOOKID_NFSD_RENAME_RETURN, + "INT32","return"); + + _register_sys_event("nfsd.close.entry", + _GROUP_NFSD, _HOOKID_NFSD_CLOSE_ENTRY, + "STRING", "filename"); + _register_sys_event("nfsd.close.return", + _GROUP_NFSD, _HOOKID_NFSD_CLOSE_RETURN, + "INT32","return"); + + _register_sys_event("nfsd.proc.lookup.entry", + _GROUP_NFSD, _HOOKID_NFSD_PROC_LOOKUP_ENTRY, "INT8:INT64:INT64:INT64:INT8:STRING", - "size:ino0:ino1:ino2:version:filename") - register_sys_event("nfsd.proc.lookup.return", - GROUP_NFSD, HOOKID_NFSD_PROC_LOOKUP_RETURN, - "INT32","return") + "size:ino0:ino1:ino2:version:filename"); + _register_sys_event("nfsd.proc.lookup.return", + _GROUP_NFSD, _HOOKID_NFSD_PROC_LOOKUP_RETURN, + "INT32","return"); - register_sys_event("nfsd.proc.read.entry", - GROUP_NFSD, HOOKID_NFSD_PROC_READ_ENTRY, + _register_sys_event("nfsd.proc.read.entry", + _GROUP_NFSD, _HOOKID_NFSD_PROC_READ_ENTRY, "INT8:INT64:INT64:INT64:INT8:INT64:INT64:INT64:INT64", - "size:ino0:ino1:ino2:version:count:offset:iov_len:vlen") - register_sys_event("nfsd.proc.read.return", - GROUP_NFSD, HOOKID_NFSD_PROC_READ_RETURN, - "INT32","return") + "size:ino0:ino1:ino2:version:count:offset:iov_len:vlen"); + _register_sys_event("nfsd.proc.read.return", + _GROUP_NFSD, _HOOKID_NFSD_PROC_READ_RETURN, + "INT32","return"); - register_sys_event("nfsd.proc.write.entry", - GROUP_NFSD, HOOKID_NFSD_PROC_WRITE_ENTRY, + _register_sys_event("nfsd.proc.write.entry", + _GROUP_NFSD, _HOOKID_NFSD_PROC_WRITE_ENTRY, "INT8:INT64:INT64:INT64:INT8:INT64:INT64:INT64:INT64", - "size:ino0:ino1:ino2:version:count:offset:iov_len:vlen") - register_sys_event("nfsd.proc.write.return", - GROUP_NFSD, HOOKID_NFSD_PROC_WRITE_RETURN, - "INT32","return") + "size:ino0:ino1:ino2:version:count:offset:iov_len:vlen"); + _register_sys_event("nfsd.proc.write.return", + _GROUP_NFSD, _HOOKID_NFSD_PROC_WRITE_RETURN, + "INT32","return"); - register_sys_event("nfsd.proc.commit.entry", - GROUP_NFSD, HOOKID_NFSD_PROC_COMMIT_ENTRY, + _register_sys_event("nfsd.proc.commit.entry", + _GROUP_NFSD, _HOOKID_NFSD_PROC_COMMIT_ENTRY, "INT8:INT64:INT64:INT64:INT8:INT64:INT64", - "size:ino0:ino1:ino2:version:count:offset") - register_sys_event("nfsd.proc.commit.return", - GROUP_NFSD, HOOKID_NFSD_PROC_COMMIT_RETURN, - "INT32","return") - - register_sys_event("nfsd.proc.compound.entry", - GROUP_NFSD, HOOKID_NFSD_PROC_COMPOUND_ENTRY, - "INT32","num") - register_sys_event("nfsd.proc.compound.return", - GROUP_NFSD, HOOKID_NFSD_PROC_COMPOUND_RETURN, - "INT32","return") - - register_sys_event("nfsd.proc.remove.entry", - GROUP_NFSD, HOOKID_NFSD_PROC_REMOVE_ENTRY, + "size:ino0:ino1:ino2:version:count:offset"); + _register_sys_event("nfsd.proc.commit.return", + _GROUP_NFSD, _HOOKID_NFSD_PROC_COMMIT_RETURN, + "INT32","return"); + + _register_sys_event("nfsd.proc.compound.entry", + _GROUP_NFSD, _HOOKID_NFSD_PROC_COMPOUND_ENTRY, + "INT32","num"); + _register_sys_event("nfsd.proc.compound.return", + _GROUP_NFSD, _HOOKID_NFSD_PROC_COMPOUND_RETURN, + "INT32","return"); + + _register_sys_event("nfsd.proc.remove.entry", + _GROUP_NFSD, _HOOKID_NFSD_PROC_REMOVE_ENTRY, "INT8:INT64:INT64:INT64:INT8:STRING", - "size:ino0:ino1:ino2:version:filename") - register_sys_event("nfsd.proc.remove.return", - GROUP_NFSD, HOOKID_NFSD_PROC_REMOVE_RETURN, - "INT32","return") + "size:ino0:ino1:ino2:version:filename"); + _register_sys_event("nfsd.proc.remove.return", + _GROUP_NFSD, _HOOKID_NFSD_PROC_REMOVE_RETURN, + "INT32","return"); - register_sys_event("nfsd.proc.rename.entry", - GROUP_NFSD, HOOKID_NFSD_PROC_RENAME_ENTRY, + _register_sys_event("nfsd.proc.rename.entry", + _GROUP_NFSD, _HOOKID_NFSD_PROC_RENAME_ENTRY, "INT8:INT8:INT64:INT64:INT64:STRING:INT8:INT64:INT64:INT64:STRING", - "version:old_size:old_ino0:old_ino1:old_ino2:old_filename:size:ino0:ino1:ino2:filename") - register_sys_event("nfsd.proc.rename.return", - GROUP_NFSD, HOOKID_NFSD_PROC_RENAME_RETURN, - "INT32","return") + "version:old_size:old_ino0:old_ino1:old_ino2:old_filename:size:ino0:ino1:ino2:filename"); + _register_sys_event("nfsd.proc.rename.return", + _GROUP_NFSD, _HOOKID_NFSD_PROC_RENAME_RETURN, + "INT32","return"); - register_sys_event("nfsd.proc.create.entry", - GROUP_NFSD, HOOKID_NFSD_PROC_CREATE_ENTRY, + _register_sys_event("nfsd.proc.create.entry", + _GROUP_NFSD, _HOOKID_NFSD_PROC_CREATE_ENTRY, "INT8:INT64:INT64:INT64:INT8:STRING", - "size:ino0:ino1:ino2:version:filename") - register_sys_event("nfsd.proc.create.return", - GROUP_NFSD, HOOKID_NFSD_PROC_CREATE_RETURN, - "INT32","return") - - reset_maxaction() -} - + "size:ino0:ino1:ino2:version:filename"); + _register_sys_event("nfsd.proc.create.return", + _GROUP_NFSD, _HOOKID_NFSD_PROC_CREATE_RETURN, + "INT32","return"); +%} probe register_event = begin { |